StarDestroyer.Net BBS

Posted: **2003-09-18 04:48pm**

Every minute or so my computer locks up for a few seconds. I ran Syscheck, Ad-Aware, AVG and Windows Update and no result. The only thing that helps is shutting down and restarting after about a half hour. Any ideas?

Posted: **2003-09-18 05:31pm**

Start-->Run-->eventvwr.msc

And p0st the events before a restart.

That should give us somthing to work with

Posted: **2003-09-18 06:34pm**

That didn't do anything... That may be a bad sign. Eek.

Also, the trouble tends to start after I've connected to the internet. I found a few processes running in the background that I didn't know what they were and killed them, but that didn't seem to help any.

Posted: **2003-09-18 06:39pm**

Have you made any changes or installed any new programs lately?

And have you tried using HijackThis?

Posted: **2003-09-18 07:20pm**

Only thing I've done recently is install the Homeworld 2 Demo.

As for HiJackThis, I have now, and it's destroyed my fragile ego by showing me how little I actually know about computers. I beseech thee, O Knowledgable ones, make sense of this?

Logfile of HijackThis v1.97.2
Scan saved at 6:48:23 PM, on 9/18/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AIM95\aim.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Opera7\opera.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://schlockmercenary.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Trace (HKLM)
O9 - Extra 'Tools' menuitem: VisualRoute Trace (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O16 - DPF: {A7798D6C-C6B5-4F26-9363-F7CDBBFFA607} (download Class) - http://www.gigex.com/ActiveX/vxpspeeddelivery.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab

Also, that eventvwr.msc window popped up about a half hour later. It showed approximately an assload of "App hangup" errors. Cool that it keeps track of that, but nothing new (the Windows link didn't have any information). Dios miyo...

Posted: **2003-09-18 07:51pm**

Please disable the items listed below and reboot.

C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\wanmpsvc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://schlockmercenary.com/
I'm assuming you set this?

O4 - HKLM\..\Run: [anvshell] anvshell.exe
What is this?

O4 - HKLM\..\Run: [LiveNote] livenote.exe
And this?

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
Feel free to disable this

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
And this one can be disabled too

O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
This scored a 9.9 on my BS meter. Please kill it

O16 - DPF: {A7798D6C-C6B5-4F26-9363-F7CDBBFFA607} (download Class) - http://www.gigex.com/ActiveX/vxpspeeddelivery.dll
Eww, Kill this![/quote]

PrinceofLowLight wrote:Also, that eventvwr.msc window popped up about a half hour later. It showed approximately an assload of "App hangup" errors. Cool that it keeps track of that, but nothing new (the Windows link didn't have any information). Dios miyo...

Hmm, can you tell me the apps that keep failing please? That may help as well. Lata and Happy Fragging!

Posted: **2003-09-18 11:47pm**

Success! Huhhah, Matt 1, computer 0! Hahaha! I still have no idea what that livenote or anvshell things are, but my computer's working, so I guess they can't be too evil. I couldn't find that ActiveX thing, and I'm pretty sure I should if I don't want problems down the road, but who cares about the long run? Computer=pwned. I r winner! Thanks!

Posted: **2003-09-18 11:48pm**

Good! Now read the stickies in this forum and get Mozilla so it never happens again

Posted: **2003-09-19 03:23pm**

Is Mozilla signifigantly more secure than Opera? I hear it lacks many plugins...

StarDestroyer.Net BBS

...help

...help